$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa File: b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa (raw, json) Hash identifier: k3G9oyfUybZDfAvjdfUW/bM1eof7Uh/dnW1SP2sZiMk= Subject key identifier: AB:74:C2:D1:28:13:8F:8B:CB:74:F9:68:88:D2:1B:1E:23:AE:83:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1D16A3DDBA127339D2680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 24319 IP address blocks: 23.208.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d1:6a:3d:db:a1:27:33:9d:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=25c996b1-ff8f-41e8-a3cc-d953ac3e8d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:ca:05:d8:0e:7e:ca:0b:ef:1d:1f:7e:e1: 85:49:1a:40:98:73:b1:0c:d8:3f:0b:c7:8b:ba:f7: 4d:70:09:03:d1:67:e3:fa:f0:c1:6d:c5:39:58:18: 9f:9c:fd:07:73:36:77:6c:ab:23:7a:14:e1:98:97: 2e:d0:81:61:95:f1:b9:d5:28:01:28:9e:a6:ac:bc: f7:1a:f4:c5:97:d4:8f:93:3f:a6:66:13:b6:c3:19: ba:77:37:38:91:dc:9e:aa:d0:c5:ae:4d:f0:41:2f: 55:02:60:06:2e:34:f1:c8:4a:96:49:c7:60:e9:43: c4:63:a6:06:88:fa:3b:d2:63:28:12:c5:e1:f2:00: 8e:1c:10:1e:b8:b5:54:83:07:51:3d:21:59:13:f5: 12:b2:4f:c6:9b:b9:6e:30:32:b6:04:8d:e0:30:0b: 73:47:cf:c4:65:7a:57:53:2e:35:0d:25:06:0c:e4: e2:85:0b:1f:3a:d4:cd:34:0e:17:56:cc:36:56:75: 81:72:ec:67:ab:d9:16:d2:10:64:59:1c:ef:74:09: 26:bf:85:7c:eb:78:72:1c:ca:d5:b5:0e:b1:87:26: 88:21:27:28:81:95:2c:e8:af:c6:d9:aa:54:93:b2: f9:92:e8:0e:e0:d0:4b:18:4a:b3:7f:b1:cb:57:fa: 7c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:74:C2:D1:28:13:8F:8B:CB:74:F9:68:88:D2:1B:1E:23:AE:83:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:93:51:87:94:c4:98:85:ca:77:8e:dc:58:bc:97:dd:a5:4b: cf:ad:25:79:13:f1:ef:c8:37:cf:01:e9:bb:16:fd:ed:42:da: c2:02:d2:b6:b5:92:96:73:45:23:7c:6b:f2:85:7c:bf:ad:75: 1c:bc:ed:a3:23:03:30:6b:ab:1e:6f:e8:dc:bf:a3:27:ca:b6: 33:cb:5c:3e:e4:fc:93:57:70:48:70:94:e6:ca:b1:bd:33:71: 43:44:9a:0a:61:20:58:44:95:e7:6a:4d:84:43:32:ae:db:b5: 2a:32:45:ea:59:1f:ef:ae:90:a1:1d:68:91:43:ee:92:a1:00: 93:17:6b:fd:bb:c1:11:20:6d:39:82:35:fc:78:69:fe:4f:01: 7d:eb:c0:87:3a:74:05:cd:f3:6b:d0:50:34:a9:23:fb:16:62: 99:b1:fb:7c:e0:f0:4a:d3:6e:57:6b:8b:71:72:89:4c:d3:c4: 82:a7:12:ee:43:b9:fb:89:36:77:ad:01:4d:e1:63:39:61:03: c4:cd:5b:6a:3a:6e:6b:c3:9f:b2:c7:e7:50:85:7f:a3:ed:d0: f9:ff:5e:13:5b:03:96:03:22:f0:31:48:6a:7b:7f:85:90:74: 8c:47:07:11:5a:49:23:be:d6:79:44:29:df:74:3f:33:ac:28: c3:8b:02:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZodFqPduhJzOdJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk MjVjOTk2YjEtZmY4Zi00MWU4LWEzY2MtZDk1M2FjM2U4ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaXKBdgOfsoL7x0ffuGFSRpAmHOxDNg/C8eL uvdNcAkD0Wfj+vDBbcU5WBifnP0HczZ3bKsjehThmJcu0IFhlfG51SgBKJ6mrLz3 GvTFl9SPkz+mZhO2wxm6dzc4kdyeqtDFrk3wQS9VAmAGLjTxyEqWScdg6UPEY6YG iPo70mMoEsXh8gCOHBAeuLVUgwdRPSFZE/USsk/Gm7luMDK2BI3gMAtzR8/EZXpX Uy41DSUGDOTihQsfOtTNNA4XVsw2VnWBcuxnq9kW0hBkWRzvdAkmv4V863hyHMrV tQ6xhyaIIScogZUs6K/G2apUk7L5kugO4NBLGEqzf7HLV/p8lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt0wtEoE4+Ly3T5aIjSGx4jroPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI4MWYzMWEtZjZkMS0z MWJiLWE3OGYtMzkwOGE1ZTIzODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9AeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiTUYeUxJiFyneO3Fi8l92lS8+tJXkT8e/IN88B6bsW/e1C2sIC0ra1 kpZzRSN8a/KFfL+tdRy87aMjAzBrqx5v6Ny/oyfKtjPLXD7k/JNXcEhwlObKsb0z cUNEmgphIFhEledqTYRDMq7btSoyRepZH++ukKEdaJFD7pKhAJMXa/27wREgbTmC Nfx4af5PAX3rwIc6dAXN82vQUDSpI/sWYpmx+3zg8ErTbldri3FyiUzTxIKnEu5D ufuJNnetAU3hYzlhA8TNW2o6bmvDn7LH51CFf6Pt0Pn/XhNbA5YDIvAxSGp7f4WQ dIxHBxFaSSO+1nlEKd90PzOsKMOLApo= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:41 2025 by rpki-client